Openvpn client DNS_PROBE_FINISHED_NXDOMAIN

Hi Arnaud,

SET UP
Follow this guide to set up your VPN client with Luci.
In Le Crabe's guide:

  • 2 - this is the 2nd instruction of my stage 2. With NordVPN, no need to modify the .ovpn you download.
  • 3.1 - this is my stage 1
  • 3.2 - this is the 3rd and 4th instruction of my stage 2. No need to rename any file or replace any path.
  • 3.3 - this is 5th, 6th, 7th, 8th and 9th instruction of my stage 2
  • 3.4 - this is my stage 3
  • 3.5 - this is my stage 5, I don't think the updns and downdns scripts are required.
  • 3.6 - not included in my guide, but OpenVPN logs will appear in System Logs anyway.
  • 3.7 - this is my stage 4
  • 3.8 - I don't see a point setting DNS servers other than NordVPN's. If you are already trusting NordVPN over your ISP with your internet traffic, then there is no reason not to trust their DNS servers too. You could argue that, often, you actually reduce your risk of leaking DNS if you stick with your VPN DNS servers, but that's another topic. From my experience, NordVPN DNS servers are fast and don't create issues.
  • 4 - it's the very final step of my guide
  • 5 - not in my guide yet, this is a good practice obviously.

VERIFICATIONS
Once you have gone through the 5 steps of my guide, your VPN client is hopefully working.
If not, share the following with us again:
/etc/config/openvpn
/etc/config/firewall
/etc/config/network
Make sure to redact or change personal information like username or password if there is any.
Everything you set up should appear in these files.

OTHER CONSIDERATIONS

  • in step 3, I had to edit the vpn interface section in /etc/config/network to make sure the proto option was listed first. On my Linksys WRT32X router I found that, using Luci, the proto option was listed after the ifname option. That prevented the VPN client to work for some reason. I don't know if it is a problem with my router model or an issue with Luci or... with me!
  • sometimes, if you tweaked a system too much, you are better off reinstalling everything from scratch. It may take less time than trying to troubleshoot your problems.
  • for the time being, I haven't included instructions for setting a kill switch, I can cover this once your set up is working
  • if you want to double check you got the instructions right, you can send me personal messages in either French or English.
1 Like